Wrong user name being passed

Tmonte tmonte01 at baker.edu
Wed Apr 23 14:02:07 EDT 2014


Thanks I guess what I mean is, we are able to log in with no problems, just
that the user name presented is not what we want. In my example, login is
peted and I want Pete. And I'm still learning. The wiki is a big help. I
followed your wiki and then the information from ESRI -
http://doc.arcgis.com/en/arcgis-online/reference/configure-shibboleth.htm
I also posted on ESRI's forums. I'm thinking the givenname attribute
isn't
being sent correctly to ArcGIS Online or mapped to some weird attribute
name.


On Wed, Apr 23, 2014 at 1:53 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 4/23/14, 1:11 PM, "P Diak" <pete_diak at hotmail.com> wrote:
> >
> >Everything is working fine, but at login my user name is showing as
> >peted. I want just Pete.
>
> >Trying to figure out why the principal name is being used as the
> >givenName. Ideas?
>
> How do you know that it is? Why are you assuming givenName is involved?
> Your sample below is not showing a SAML Attribute element. Unless maybe
> you mean that the source of the data being sent in your directory is
> itself givenName.
>
> >Also, I'm new to Shibboleth, I figure this is probably something simple.
>
> It will not be simple if you don't find the documentation itself
> understandable. You may well not, but it's all we have.
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier
>
>
> >Also, here is a snippet from a SAML tracer trace:
>
> That is not givenName in SAML terms, it's a NameID (name identifier)
> configured with a poor choice of Format and set to include whatever data
> you happen to be feeding it to populate the identifier with. The second
> link above describes how you end up configuring things to do that.
>
> The starting point here is not really the IdP but the SP. What does the SP
> require? What SAML attributes or faling that, what NameID format(s) does
> it want to receive? Until you know that, you don't have sufficient
> information to configure the IdP to do what you need.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140423/3f9c694d/attachment-0001.html 


More information about the users mailing list